dexterm-cli 0.1.4 → 0.1.5

package/dist/packages/cli/src/mcp-follow.js

@@ -18,7 +18,7 @@ import { writeFileSync, readFileSync, rmSync, mkdirSync, statSync } from 'node:f
 import { dirname } from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { SpectatorHub, FollowController, SpectatorServer, } from '../../agents/src/index.js';
-import { rendezvousPath } from '../../mcp/src/index.js';
+import { rendezvousPath, writeFollowScreen, clearFollowScreen } from '../../mcp/src/index.js';
 function navLabel(agent, nav) {
     const coin = nav.mint ? ` ${nav.mint.length > 10 ? nav.mint.slice(0, 4) + '…' + nav.mint.slice(-4) : nav.mint}` : '';
     if (nav.screen === 'token')
@@ -56,6 +56,7 @@ export class McpFollowSession {
     stream = null;
     armed = false;
     paused = false;
+    lastSnapshot = 0;
     constructor(opts) {
         this.opts = opts;
         this.agentLabel = opts.agentLabel || 'mcp-agent';
@@ -85,10 +86,23 @@ export class McpFollowSession {
             }
         }
         if (!this.timer) {
-            this.timer = setInterval(() => this.pump(), Math.max(30, this.opts.pollMs ?? 150));
+            this.timer = setInterval(() => { this.pump(); this.publish(); }, Math.max(30, this.opts.pollMs ?? 150));
             this.timer.unref?.();
         }
     }
+    /** Publish the follow-mode screen snapshot (throttled to ~1/s; only while armed). Never throws. */
+    publish(force = false) {
+        if (!this.opts.snapshot || !this.armed)
+            return;
+        const now = (this.opts.now ?? Date.now)();
+        if (!force && now - this.lastSnapshot < 1000)
+            return;
+        this.lastSnapshot = now;
+        try {
+            writeFollowScreen(this.opts.env, this.opts.snapshot());
+        }
+        catch { /* fail closed: stale → nav refused */ }
+    }
     /** Write (or re-write) the channel + rendezvous so the server emits here. */
     rearm() {
         try {
@@ -108,8 +122,11 @@ export class McpFollowSession {
             // A second follow surface may have replaced the rendezvous after this session started.  Never remove
             // another surface's live handle when this one pauses, is killed, or exits.
             const current = JSON.parse(readFileSync(this.rvPath, 'utf8'));
-            if (current.token === this.token)
+            if (current.token === this.token) {
                 rmSync(this.rvPath, { force: true });
+                if (this.opts.snapshot)
+                    clearFollowScreen(this.opts.env);
+            }
         }
         catch { /* absent/malformed/another surface owns it */ }
         this.armed = false;
@@ -182,6 +199,15 @@ export class McpFollowSession {
             }
             catch { /* ignore */ }
         }
+        // task-1443: every agent PAPER write (fill, close, size, or a refusal) is toasted in the terminal, whatever the
+        // follow state, so the watcher always sees what the agent did to the simulated ledger.
+        if (typeof ev.tool === 'string' && /^paper_(open_ticket|size_ticket|confirm|close)$/.test(ev.tool)) {
+            const what = ev.ok === false ? `PAPER ${ev.tool.slice(6).replace('_', ' ')} refused · ${String(ev.summary ?? '').replace(/^error: /, '').slice(0, 70)}` : String(ev.summary ?? ev.tool);
+            try {
+                this.opts.onStatus?.(`agent ${this.currentAgent}: ${what}`);
+            }
+            catch { /* ignore */ }
+        }
         try {
             this.opts.onEvent?.();
         }
@@ -195,10 +221,14 @@ export class McpFollowSession {
         return !st || st.status === 'active';
     }
     // ----- the owner's controls. Each returns a short line to toast. -----
-    pause() { const l = this.follow.pause(this.currentAgent); this.paused = l.startsWith('paused '); this.opts.onStatus?.(l); return l; }
-    takeOver() { const l = this.follow.takeOver(this.currentAgent); this.paused = false; this.opts.onStatus?.(l); return l; }
-    resume() { const l = this.follow.resume(this.currentAgent); this.paused = false; this.opts.onStatus?.(l); return l; }
-    kill() { const l = this.follow.kill(this.currentAgent); this.paused = false; this.opts.onStatus?.(l); return l; }
+    pause() { const l = this.follow.pause(this.currentAgent); this.paused = l.startsWith('paused '); this.control('paused'); this.opts.onStatus?.(l); return l; }
+    takeOver() { const l = this.follow.takeOver(this.currentAgent); this.paused = false; this.control('takeover'); this.opts.onStatus?.(l); return l; }
+    resume() { const l = this.follow.resume(this.currentAgent); this.paused = false; this.control('running'); this.opts.onStatus?.(l); return l; }
+    kill() { const l = this.follow.kill(this.currentAgent); this.paused = false; this.control('stopped'); this.opts.onStatus?.(l); return l; }
+    control(state) { try {
+        this.opts.onControl?.(state);
+    }
+    catch { /* never breaks the key loop */ } }
     /** Any physical keypress while the agent is driving: the human takes over (no fight over the screen). */
     userKey() { if (this.follow.controlState === 'agent')
         this.takeOver(); }

package/dist/packages/cli/src/record-cmd.js

@@ -46,6 +46,8 @@ export function buildLiveEngine(env, opts) {
     let newpairs = null;
     if (!opts.noNewpairs) {
         newpairs = new NewPairsLive(feed.dl, {});
+        // 0.1.5 dev history: keep the creator of every new pair in the recorder's creator index.
+        newpairs.onCreator = (mint, creator, source, createdAt) => { recorder.recordCreator(mint, creator, source, undefined, createdAt); };
         const client = new PumpPortalClient({ health: feed.dl.health, clock: feed.dl.clock, onEvent: (ev) => newpairs.handleEvent(ev), onStatus: () => { } });
         newpairs.attach(client, 'live');
         newpairs.start();

package/dist/packages/cli/src/rules.js

@@ -1,3 +1,4 @@
+import { devBookOf } from "./live/dev-history.js";
 import { RulesEngine, ruleToJson, ruleToText, slug, applyAndJournal, describeActions, } from '../../custom/src/index.js';
 import { alertToDelivery, proposalToDelivery } from "./alerts/format.js";
 export const RULE_INPUT_MAX = 400;
@@ -66,11 +67,14 @@ export function ruleRowsOf(state) {
         return c ? c.pct : null;
     };
     const openMint = state.live?.token?.view.mint ?? null;
+    // 0.1.5 dev history: the creator's recorded rugs as the `devrugs` field (local recorder only; null = unknown).
+    const book = devBookOf(state);
+    const devRugsOf = (mint) => book ? book.rugsFor(mint) : null;
     for (const r of state.screener.rows) {
         if (!r.mint || r.skeleton || seen.has(r.mint))
             continue;
         seen.add(r.mint);
-        const row = Object.assign(Object.create(null), r, { cluster: clusterOf(r.mint), larp: larpGrade(state.larpByMint?.get(r.mint)?.verdict) });
+        const row = Object.assign(Object.create(null), r, { cluster: clusterOf(r.mint), larp: larpGrade(state.larpByMint?.get(r.mint)?.verdict), devRugs: devRugsOf(r.mint) });
         if (r.mint === openMint)
             overlaySignalFields(row, state, r.mint);
         out.push(row);
@@ -81,12 +85,31 @@ export function ruleRowsOf(state) {
         const row = Object.assign(Object.create(null), {
             mint: v.mint, symbol: v.symbol, price: v.price, mcap: v.mcap, fdv: v.fdv, liq: v.liq, vol24: v.vol24,
             holders: v.holders, org: v.org, top10: v.top10, dev: v.dev, lpLocked: v.lpLocked,
-            cluster: clusterOf(v.mint), larp: larpGrade(state.larpByMint?.get(v.mint)?.verdict),
+            cluster: clusterOf(v.mint), larp: larpGrade(state.larpByMint?.get(v.mint)?.verdict), devRugs: devRugsOf(v.mint),
             ageMin: v.ageMin, chg: v.chg, launchpad: v.launchpad, flags: v.flags, verified: v.verified, sus: v.sus,
         });
         overlaySignalFields(row, state, v.mint);
         out.push(row);
     }
+    // 0.1.5 dev history: a brand-new pair (PumpPortal / RugCheck) whose creator has a labelled record becomes a rule
+    // row too, so `devrugs >= N scope newpairs` can alert on a new coin from a wallet that rugged before. Only pairs
+    // with a known record are added (no flood of unknowns); every other field is what the new-pairs feed knows.
+    const np = state.live?.newpairs;
+    if (book && np) {
+        const now = Date.now();
+        for (const p of np.rows.values()) {
+            if (seen.has(p.mint) || !p.creator)
+                continue;
+            const devRugs = devRugsOf(p.mint);
+            if (devRugs === null)
+                continue;
+            seen.add(p.mint);
+            out.push(Object.assign(Object.create(null), {
+                mint: p.mint, symbol: p.symbol, mcap: p.mcap, liq: p.liq, holders: p.holders, launchpad: p.launchpad,
+                ageMin: p.createdAt ? Math.max(0, (now - p.createdAt) / 60_000) : null, bonding: p.bonding, devRugs,
+            }));
+        }
+    }
     return out;
 }
 /** Overlay the live-signals engine's latest values (non-null wins) onto a rule row (task-1404). */

package/dist/packages/cli/src/screens/analyst-session.js

@@ -18,9 +18,11 @@ export function renderAnalystSession(c, x, y, w, h, s, opts) {
     const bc = mix(t.border, t.ai, 0.55);
     // Narrow panels (token screen) drop the model so cost · latency · tools still fits beside the title.
     const full = s.status === 'error' ? 'analyst unavailable' : s.footer;
-    const caption = (opts.title ?? '✦ ANALYST · claude').length + full.length + 10 <= w ? full : full.split(' · ').slice(0, 3).join(' · ');
+    // 0.1.5: a codex conversation says so in the title; claude panels keep the original default.
+    const title = opts.title ?? (s.engine === 'codex' ? '✦ ANALYST · codex' : '✦ ANALYST · claude');
+    const caption = title.length + full.length + 10 <= w ? full : full.split(' · ').slice(0, 3).join(' · ');
     const capFg = s.status === 'error' ? t.warn : t.dim;
-    const box = c.box(x, y, w, h, { title: opts.title ?? '✦ ANALYST · claude', titleFg: t.ai, caption, captionFg: capFg, border: bc });
+    const box = c.box(x, y, w, h, { title, titleFg: t.ai, caption, captionFg: capFg, border: bc });
     const bg = box.bg;
     const inner = box.w - 2;
     const frame = opts.frame;
@@ -47,7 +49,7 @@ export function renderAnalystSession(c, x, y, w, h, s, opts) {
     const drawTail = () => drawInput(c, box, bc, inputY, opts, s);
     // earlier exchanges on this warm session (compact marker; the current turn is drawn in full below)
     if (s.history.length && cy < inputY - 1) {
-        c.text(box.x + 1, cy, `⟲ ${s.history.length} earlier ${s.history.length === 1 ? 'exchange' : 'exchanges'} · one warm claude session`, { fg: t.dim, bg, i: true }, inner - 1);
+        c.text(box.x + 1, cy, `⟲ ${s.history.length} earlier ${s.history.length === 1 ? 'exchange' : 'exchanges'} · one warm ${s.engine} session`, { fg: t.dim, bg, i: true }, inner - 1);
         cy += 1;
         const last = s.history[s.history.length - 1];
         const prev = last.error ? `last: ${last.error}` : last.verdict ? `last: ${last.verdict}` : last.summary[0] ? `last: ${last.summary[0]}` : '';

package/dist/packages/cli/src/screens/analyst.js

@@ -42,7 +42,8 @@ export function renderAnalyst(c, state) {
     // next to live data — in live mode the empty tab says how to start a real conversation instead.
     if (state.screener.source !== 'fixtures') {
         const live = state.aiFocused === true;
-        const b = c.box(0, top, chatW, bottom - top, { title: '✦ ANALYST · claude', titleFg: t.ai, caption: 'read-only · local claude CLI · on demand', captionFg: t.dim, border: bc });
+        const eng = state.analystEngine ?? 'claude'; // 0.1.5: the user's own CLI that will answer (claude | codex)
+        const b = c.box(0, top, chatW, bottom - top, { title: `✦ ANALYST · ${eng}`, titleFg: t.ai, caption: `read-only · local ${eng} CLI · on demand`, captionFg: t.dim, border: bc });
         const bbg = b.bg;
         const bin = b.w - 2;
         let by = b.y + 1;
@@ -54,7 +55,7 @@ export function renderAnalyst(c, state) {
         } };
         say2('No conversation yet.');
         by += 1;
-        say2("Press  i  to ask claude about the market, a token, or your watchlist. It can read the live screener, a token's holders / tape / RugCheck, and your watchlist — read-only, never trades.");
+        say2(`Press  i  to ask ${eng} about the market, a token, or your watchlist. It can read the live screener, a token's holders / tape / RugCheck, and your watchlist — read-only, never trades.`);
         const iy = b.y + b.h - 2;
         c.hline(b.x, iy - 1, b.w, { fg: bc, bg: bbg, soft: true });
         c.put(b.x, iy - 1, '├', { fg: bc, bg: bbg, soft: true });
@@ -64,7 +65,7 @@ export function renderAnalyst(c, state) {
         if (typed)
             c.text(b.x + 2, iy, typed + (live ? '█' : ''), { fg: t.text, bg: bbg }, bin - 2);
         else
-            c.text(b.x + 2, iy, live ? '█ type your question…  ⏎ send · esc blur' : 'press i to ask claude · ⏎ to focus', { fg: t.dim, bg: bbg, i: true }, bin - 2);
+            c.text(b.x + 2, iy, live ? '█ type your question…  ⏎ send · esc blur' : `press i to ask ${eng} · ⏎ to focus`, { fg: t.dim, bg: bbg, i: true }, bin - 2);
         if (railW)
             renderCoinList(c, chatW, top, railW, bottom - top, state);
         footer(c, analystFooter(state, live), state.theme.name, isCalm(state.vfx));

package/dist/packages/cli/src/version.js

@@ -1,3 +1,3 @@
 // The one place the app's version lives (task-1397). --version, the help banner and `dexterm update` read it;
 // cli.test.ts keeps it equal to packages/cli/package.json (release.yml refuses a tag that differs).
-export const VERSION = '0.1.4';
+export const VERSION = '0.1.5';

package/dist/packages/custom/src/rules.js

@@ -3,13 +3,13 @@ export const FIELDS = {
     vol5m: (r) => r.vol5m, vol1h: (r) => r.vol1h, vol24: (r) => r.vol24,
     holders: (r) => r.holders, org: (r) => r.org, top10: (r) => r.top10, dev: (r) => r.dev,
     lplocked: (r) => r.lpLocked, bundled: (r) => r.bundled, snipers: (r) => r.snipers,
-    cluster: (r) => r.cluster, larp: (r) => r.larp,
+    cluster: (r) => r.cluster, larp: (r) => r.larp, devrugs: (r) => r.devRugs,
     fresh: (r) => r.fresh, mintable: (r) => r.mintable, freezable: (r) => r.freezable,
     age: (r) => r.ageMin, m5: (r) => r.chg?.m5, h1: (r) => r.chg?.h1, h6: (r) => r.chg?.h6, h24: (r) => r.chg?.h24,
     buys: (r) => r.buys, sells: (r) => r.sells, bonding: (r) => r.bonding,
 };
 export const FIELD_NAMES = Object.keys(FIELDS);
-const ALIASES = { vol: 'vol24', volume: 'vol24', liquidity: 'liq', cap: 'mcap', mc: 'mcap', holder: 'holders', organic: 'org', top: 'top10', locked: 'lplocked', 'cluster%': 'cluster', clusterpct: 'cluster', freshwallets: 'fresh', mintauth: 'mintable', freezeauth: 'freezable' };
+const ALIASES = { vol: 'vol24', volume: 'vol24', liquidity: 'liq', cap: 'mcap', mc: 'mcap', holder: 'holders', organic: 'org', top: 'top10', locked: 'lplocked', 'cluster%': 'cluster', clusterpct: 'cluster', freshwallets: 'fresh', mintauth: 'mintable', freezeauth: 'freezable', devrug: 'devrugs', serialrugger: 'devrugs' };
 const OPS = { '>': (a, b) => a > b, '>=': (a, b) => a >= b, '<': (a, b) => a < b, '<=': (a, b) => a <= b, '=': (a, b) => a === b, '==': (a, b) => a === b, '!=': (a, b) => a !== b };
 const TAGS = {
     launchpad: (r, v) => (r.launchpad ?? '').toLowerCase().replace('.fun', '') === v.toLowerCase().replace('.fun', ''),

package/dist/packages/custom/src/schema.js

@@ -261,6 +261,10 @@ export const SCHEMAS = {
                     /** Reserved: the trading gate is NOT here (signer policy owns it); listed so a proposal that tries gets a precise refusal. */
                     gate: { type: 'string', enum: ['keypress'] },
                 } },
+            /** 0.1.5: which of the user's own CLIs runs the analyst. `/analyst` is user-only (DENIED_FOR_MODELS): a model never picks its own engine. */
+            analyst: { type: 'object', additional: false, props: {
+                    engine: { type: 'string', enum: ['auto', 'claude', 'codex'] },
+                } },
             /** task-1393: voice-out preferences. `/voice` is user-only (DENIED_FOR_MODELS), so only the keyboard sets it. */
             voice: { type: 'object', additional: false, props: {
                     name: { type: 'string', max: 64 },
@@ -426,7 +430,7 @@ export function applyOps(doc, ops) {
 export const DENIED_FOR_MODELS = [
     /^\/signer(\/|$)/, /^\/trading(\/|$)/, /^\/keys(\/|$)/, /^\/caps(\/|$)/, /^\/mandates?(\/|$)/, /^\/wallet(\/|$)/,
     /^\/packs(\/|$)/, /^\/plugins\/[^/]+\/(capabilities|enabled)(\/|$)/, /^\/plugins\/[^/]+$/, /^\/plugins$/,
-    /^\/jarvis\/gate(\/|$)/, /^\/jarvis\/configAssistant$/, /^\/voice(\/|$)/, /^\/alerts(\/|$)/, /^\/agents(\/|$)/, /^\/version$/,
+    /^\/jarvis\/gate(\/|$)/, /^\/jarvis\/configAssistant$/, /^\/voice(\/|$)/, /^\/analyst(\/|$)/, /^\/alerts(\/|$)/, /^\/agents(\/|$)/, /^\/version$/,
     /^\/rules\/(\d+|-)\/then\/(\d+|-)\/args\/(arm|armed|auto|autoArm|confirm|execute|sign|send)(\/|$)/,
 ];
 /** Keys a model-authored VALUE may never contain at any depth (money/secret-shaped), whatever the path. */

package/dist/packages/data/src/fixtures.js

@@ -62,21 +62,43 @@ export class FixtureStore {
     }
     save(path, note) {
         mkdirSync(dirname(path), { recursive: true });
-        const file = {
+        const raw = {
             version: 1,
             recordedAt: new Date().toISOString(),
             note: note ?? this.note,
             entries: this.list(),
         };
         if (this.streams.length)
-            file.streams = this.streams;
-        const text = JSON.stringify(file, null, 1) + '\n';
-        // Belt and braces: the key is redacted at capture time; refuse to write a file that still carries one.
-        if (containsSecret(text))
+            raw.streams = this.streams;
+        // Request URLs are redacted at capture time, but live response bodies echo third-party URLs with key-shaped
+        // params (DexScreener image URLs carry `&key=<cache id>`); refusing those threw away whole live sessions at
+        // quit (task-1443). Redact every string instead. Replay still matches: requestKey() redacts the same way.
+        const file = scrubSecrets(raw);
+        // Belt and braces: never write a file that still carries a key value (checked per string, so escaping is moot).
+        if (anyString(file, containsSecret))
             throw new Error('refusing to save a recording that contains an api-key value');
-        writeFileSync(path, text);
+        writeFileSync(path, JSON.stringify(file, null, 1) + '\n');
     }
 }
+/** A deep copy of `v` with redactSecrets() applied to every string. */
+function scrubSecrets(v) {
+    if (typeof v === 'string')
+        return redactSecrets(v);
+    if (Array.isArray(v))
+        return v.map(scrubSecrets);
+    if (v && typeof v === 'object')
+        return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, scrubSecrets(x)]));
+    return v;
+}
+function anyString(v, pred) {
+    if (typeof v === 'string')
+        return pred(v);
+    if (Array.isArray(v))
+        return v.some((x) => anyString(x, pred));
+    if (v && typeof v === 'object')
+        return Object.values(v).some((x) => anyString(x, pred));
+    return false;
+}
 export function toEntry(req, res, recordedAt = new Date().toISOString()) {
     let body = res.body;
     let bodyIsJson = false;

package/dist/packages/data/src/index.js

@@ -38,6 +38,9 @@ export * from "./trade/tx-decode.js";
 export * from "./trade/sol-usd.js";
 export * from "./trade/kill-switch.js";
 export * from "./trade/token-delta.js";
+// task-1443: the paper agent desk + its rendezvous (agents paper-trade inside an armed mandate; never sign/send).
+export * from "./trade/agent/paper-desk.js";
+export * from "./trade/agent/rendezvous.js";
 export * from "./trade/signer/protocol.js";
 export * from "./trade/signer/service.js";
 export * from "./trade/signer/host.js";

package/dist/packages/data/src/sources/jupiter.js

@@ -106,6 +106,7 @@ export function normalizeJupToken(raw, fetchedAt) {
         top10Pct: numOrNull(raw.audit?.topHoldersPercentage),
         devPct: numOrNull(raw.audit?.devBalancePercentage),
         devMints: numOrNull(raw.audit?.devMints),
+        devAddress: typeof raw.dev === 'string' && /^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(raw.dev) ? raw.dev : null,
         lpLockedPct: null,
         rugRisks: [],
         rugScore: null,